Hikvision Upgrade Breaks ONVIF VMS Integration

Author: Ethan Ace, Published on Oct 31, 2017

Hikvision IP cameras using ONVIF for VMS integration will break when upgrading to Hikvision new 5.5 firmware, IPVM testing has verified.

This continues a series of quiet changes Hikvision has made to fix security problems that are simultaneously undermining customer usability.

In this report, we test the issues involved, show what happens with the new firmware and how this impacts Hikvision support for 3rd parties.

********* ** ******* ***** ***** *** *** *********** **** ***** when ********* ** ********* *** *.* ********, **** ******* *** verified.

**** ********* * ****** ** ***** ******* ********* *** **** to *** ******** ******** **** *** ************** *********** ******** *********.

** **** ******, ** **** *** ****** ********, **** **** happens **** *** *** ******** *** *** **** ******* ********* support *** *** *******.

[***************]

ONVIF *** ********

******** ** ** ****** ******** *.*, ********* ** ********* ***** by *******, ** ***** ******* ***** *******:

***** ******** ** ******** ** *******. *** **** ** ***** configuration ** *** ********* ** *************->******->******** ********->*********** ********. ***** **** accounts **** ** ** ******* *** *********** ** *****. ***** ONVIF **** ****** ** *************, **** *** ******** *** **********, with ** ** ** **** ********. *** *********, ****-**** *** Batch ************* **** *** ********* *** ***** *************

**** ******** ******* ** ********* ** ********* *** *** ** ***** ********.

Upgrading ******** *****

*** ********* ******* *** ******** ********* ***** ***:

  • *** ******* ************* ******** *****. ** ****, ** **** ****** is ******* ***** ***** *** *** ***********, ***** ************ **** break.
  • ********* *** *** ************ **** ** **** ****** *******, *** integration ****** ****** *** *** **** ** ******** ***** **** happened.

Why **** ********* ******** *****?

********* *** *** ********* ******* **** ** * ******* ** not. ******* ***** ** *** ******* ******* ******** ***, ** **********, *** ***** **** ***** ******** ********** (*.*., ****://******.**/*****-****/********?****=************) ** * ****** ** ******* ***** by *******.

VMS ***** ************

** *** ******* *****, *** ****** ** ***** ********* ******** in *****, **** *** ****** ******* ** *** ******* ** started *** ***** ************:

*******, **** ********** ** *** *** ******, ***** ***** **** error *******:

New ***** ******

***, ** *** ********* **** *****, ***** ***** ** ** enabled *** ** ***** ******* *** ******** **** ** ** created, ** ***** ** *** **** *****. ***** *********** *** used ** *** *** ****** ** *** ***/***, *** *** usual ***** *********** ***** **** ************ **** ****.

***** *** **** *** *********'* ***** ************* **** (**.*.*.*) ** enable ***** *** *** ***** ** ****, ******** *** *******, but **** **** ***** ***** ****** ** ***** ***** ** the *.* *******, ** ******** ** ***********.

Impact *****

** *** ***** ****** **** ****:

  • ** *** ******** ****, *********'* ****** *** ** ****** ********* so, ** *** ****** **** *** ** ***** *********'* ***, this **** *** ** ** *****.
  • ** *** ******** ****, ***** ******* ***** ***** **** ********* need ** *********** *** ***** ******* ***, ***** ****, *** know **** *** ********, *** **** ***** *** **** ****.
  • ****, **** **** **** ***** ********* **** ***** ********** **** time ********* *** *******.

Reasons *** *****

** *****, *********'* ****** *** ** ****** ********* *** ***** are ******* *** ***** *********** ** *********: **** ******* *** ONVIF ** ***** **** *** ***** ****** ***, **** ******* and ************* ********. ********* ****** ****** **** *** ********* ***** the ****** *** (*** ** ****** ** ****** **** *** 3rd *****) *** ***** *********** ** ******.

Update: ******* ***** ****** ******

*** ********* ******* ***** *** ****** ********** **.* ******** *** ******, ****** **** ******, ********** **** "** ******* **** ***** to ********, *********, *** ****** ***** **** ********* *******" *** that *********, ******** **** ***** *** *********** **** ******* *****. Network ***** **** ******** ***** ** ***.***** **** ~**% ** ******* ***** ********* ******* *** *********, **** ***** ** * ***-******* ******* ***** *** *** company.

Typically ******* ******* ***** *******

********* ** ****** ** ******** ******** ****, **** ****** ************* overwhelmingly ********** ***** ** ** *******. *******, *** **** ***** somewhat ***** ** ****; **** ********** ** *******, **** ****/**** ** ***********. *******, ** *** logs **** *** ******'* *** ********* *** ****** * **** password, ** ******************* ** ** ******** **-*******.

Hikvision ******* *****

**** ** ****** * **** *** ********* ** ******* ***** cybersecurity ** ** ***** ***** ***** ******** ********. *******, *** process **** *** ***** ** **** **** ****** ***** **** for ********* ***** *****. ** **** ** *********** ** ***** as ********* ********* **** **** ******* *** ** ******* ***** overall ********* *** ********** *** *** ******* ***** *** **** DIY ********* **** **** ********** **** *********'* ********* **********.

Comments (53)

Undisclosed Integrator #1

10/31/17 04:00pm

** **** ***** **’** ********* ********* ** ********* *******. **’* too *** * **** ** ********* ** *** **** **** to *** **** ***** ********* *******. ***** ** ********* **** new ******** ********* *** ********* **** *** *** *** **** through *** ************* ***** ** **********. * *** **** ***** hours ****** ** ****** **** ***.

***** ********* ** **** **** **** *****. ****** ** ********** well ***** **. ****** **** **** ********* **** *** **** two ***** *** *** **** ******** **’** ****.

Undisclosed Integrator #4

In reply to Undisclosed Integrator #1 | 10/31/17 06:45pm

*** *** **** ** **** **** **** ********* **************. **** I ***** **** ********* **** ** ***** ********* **** ********* they **** ******* ***** *** ** ******* ** **** ******* the ******* ******** ** *** ******. * *****'* ****** **** the *** ********, *** **** **** ** *** * ****** check *** **********. ** ***** ** **** ** *** ***** hit ** ** ****, ** **** *** *** ******.

Undisclosed Integrator #1

In reply to Undisclosed Integrator #4 | 10/31/17 06:57pm

** ***'* *** ***** **** ** *** *** ** ** via ***** ************* **'* *** * **** **** *** ***** a ******. ********** ** ******* ******* *** **'** ******* ***** onsite ******* ** ******* *** ***'* *** *** ***** ************* tool ******* ******* * **** ***.

Undisclosed Integrator #4

In reply to Undisclosed Integrator #1 | 10/31/17 07:03pm

**... * **** **** ****. * **** ********* ** *** neighborhood ** **** ******* **** * ** ****** ** **** up ** ****. ***** **** ~*** ** ***** ******* *** on *** ***** *** * ***** ** ***** ** * firmware ****** ***** *** ******.

Thumbnail me

Campbell Chang

In reply to Undisclosed Integrator #1 | 11/01/17 12:18am

** *** *** **** *** ******* ***** *** **** ******** update?

John Honovich

IPVM | In reply to Campbell Chang | 11/01/17 12:25am

** *** *** **** *** ******* ***** *** **** ******** update?

** **** ****, *** ******* ***** ****** ** ******* / more ********. ** **** "***** ******** ** ******** ** *******" but ** ** *** ***** ******* **** ***** *** ******* will ******* ***** *** ******** ******* **** **** ***** ******* enabled.

*********, ********* ***** ****** ******** ******** ** *** ** *** things, *** ** ***** ****** **** ******* ****. ********, **** an ****** ** * *** ** *** *** *****.

*********, ** *** *** ***** ** ***** ******** ************* *** devices ******* ******** ***** ********, ** ****** ** *********** ********* in *** ******* *****. ***/**?

Undisclosed Integrator #1

In reply to Campbell Chang | 11/01/17 01:35am

*** *** *** **** ** *******?

Dennis Ruban

In reply to Campbell Chang | 11/01/17 04:51pm

* *****, ******* ***** ******* ****** **** ***** ** ******** now. * *******, **% ** *** ********** **** ***'* **** it

John Honovich

IPVM | In reply to Dennis Ruban | 11/02/17 05:37am

* *******, **% ** *** ********** **** ***'* **** **

******, * ** ***** **** **** ********** ***'* **** ******* notes (* ***'* ***** ****** *** ***** ** *** ***** percentages *** **'* ********* ********** ** ***** ** ** ******).

*** ****** *** **** ** *** **** ******* ***** ** that ******** ******** ********* *** ****** ****** *** *** *** features. ** ** **** **** ****** *** * ******** ******* to ******** ***** ****** (***** ** **** ********* *** **** here). ** **** ***, ********** *** ********* ******* ******** ******** are ******.

*** *** * ***** **** ********** ********* ***'* **** ******* notes. **********, *********, **** **,*** '*********', **** ***** ****.

*** ********* *** ** **** **** ******* *** ***** ** existing ******* ** ***** ** ***** **** *** ************ (***** 10,000 '*********'). ****, ** ********* ***** ** ** ****, *** least **** *** ** ** *********** *** *********** **** **** known ** ********** ********* **************. ***/**?

Undisclosed #3

In reply to John Honovich | 11/02/17 09:12am

** ** **** **** ****** *** * ******** ******* ** actually ***** ******...

** ** **** **** ****** *** * ******** ******* ** actually *********** ***** ******...

John Honovich

IPVM | In reply to Undisclosed #3 | 11/02/17 11:02am

******** *********** ***** ******...

*** ****, ***. **** ****, *********** ******** ****** ** **** common. *******, ****** *** *****, ** * ** ***** **** firmware ****** ** ******* ** ********** ****** *********.

*******, ** * ************ ***** **** *** ******** ********* ***********, e.g., **** **** ********** *** *******, **** **** * ************** to **** ** ***** ****** ** *********** ****.

**** *****, *****'* * **** ** ******* **** '**** *** a ********' *** **** *** ** *** ***** *** '***'/'********' when *** ** ********, *.*., *** ********* *** ** ******* but *** ****** ********* (** **** **** ***** ***) ***** not ** *******. * **** ** ***** **** **** ******* when *** ** ***** *** *** (***** ** *********** **** Hikvision *** ****), *** ***** **** *** ***** ** ** spent ** *** **** / ********.

Rodney Thayer

In reply to John Honovich | 11/02/17 02:11pm

* ***'* ***** **** ***** *** ***. * ***** *** changed **** ***-***** *** *** ** **** ******** ***** *** API. ***** ** *** ***** ** **** ****** *'* ******* the ******* **** *** *** *********** **** ********** ****** ** a ***********-******** ******.

Undisclosed Integrator #2

10/31/17 04:23pm

** ***** * *** ** **** ********* *** ******** ** ONVIF? * *** ******* ** ** ******** *** * *** hundred ******* ******** ** ***** ********, ***** **** ** ******* for * ************* ***** ***** *** *** ******* *** *** VMS. ****** ** ** **** ** **** ********** ****** ***** be * *********.

Thumbnail newheadshot

Sean Nelson

Nelly Security | In reply to Undisclosed Integrator #2 | 10/31/17 10:44pm

** **** ** **** ** ********* ** ***** ****** ******, hopefully.

R OD

IPVMU Certified | In reply to Undisclosed Integrator #2 | 11/01/17 01:37pm

***, *** *** *** ***** ****** **** **.*.*.* ** **** enable/disable ***** ********.

Undisclosed #3

10/31/17 04:29pm

***, ** *** ********* **** *****, ***** ***** ** ** enabled *** ** ***** ******* *** ******** **** ** ** created, ** ***** ** *** **** *****. ***** *********** *** used ** *** *** ****** ** *** ***/***, *** *** usual ***** *********** ***** **** ************ **** ****.

**** ** *** ****** ** ***** ******* ***** “*****” **** the **** ******** ** *** ***-***** ***** *******,*********** *** ******* ** * *** ** ******** *********** *** downtime?

Undisclosed Integrator #4

In reply to Undisclosed #3 | 10/31/17 07:06pm

****** *** *** **** ** *** **** **** ****?

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Undisclosed #3 | 10/31/17 07:10pm

**** *****'* ****, ******* ***** ** ** ***** ******* ***** to *** *******. **** ***** *****'* ******** **** ***** ***** prior ** *.*.

** *** ******* *** **** ****** *** ****, ** **** indeed ****, ******. *** ** ***** ***'* ******** ********.

*'* *********** *** ****** ****-**** **** ****** ** *** ** this *** ** **** ** ****.

Undisclosed Integrator #4

In reply to Ethan Ace | 10/31/17 07:16pm

**** ** * **** * ** ************* **** *******. * can ****** ** ******* ****** *****/******** *** *** ***** ******* and ** **** **** ** **** *** ***, *** * still **** ** ******** ****** *** ***** *******?

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Undisclosed Integrator #4 | 10/31/17 07:21pm

****'* *******. *** **** ******* ***'* ** ******* ***** ***** you ** *** *.* *******.

* **** ******* ** **** *.*.*.*.* *** ***** ** ** way ** **** ****** ***** ******/******* ** ***** **** * can ***. ** ** ** *** **** ** * *** at * **** *******.

Undisclosed Integrator #4

In reply to Ethan Ace | 10/31/17 07:34pm

****... **** ** ***** ** ****. ****** *** *** *********** Ethan.

Thumbnail newheadshot

Sean Nelson

Nelly Security | In reply to Ethan Ace | 10/31/17 10:44pm

**** *** ******* **** *** ***** ****** ***?

Rodney Thayer

10/31/17 07:25pm

**** **** ***'** ****** ***** *** ******* **** ** ***********? You've **** ******* *****/*************** ***** ** **** ***? *** *** saying ** ** **** ********** ***** ** ******** ** *** with ** ***********?

Undisclosed Integrator #4

In reply to Rodney Thayer | 10/31/17 07:40pm

**... ********* **** * ******* *****/********* **** ** **** *** commands ** *** **** *** ****** **** ***** ***** ******. Oh *** ** * *****!

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Rodney Thayer | 10/31/17 08:14pm

*** ** ****** ****? **'** ****** ** **** ** *** the **** ***** ** ***** ********. *** ** **** ***.

Thumbnail newheadshot

Sean Nelson

Nelly Security | 10/31/17 10:45pm

** ** ***** ** **** ******, **** ** ** **** it, ********** ** *** **** ** ********** *****. ******** ** is * ***** **** ** **** ***** *********** ** ******* installed *******.

*** *** *** ** ***** ** ** ****** ** *** 5.5 *** ******** ********* ******** *******. ***** **** *** **** done, * **** *** ****** *******.

John Honovich

IPVM | In reply to Sean Nelson | 10/31/17 10:50pm

******* **** ****:** ******* **** *** ************* ** **** ******* **** ***** Security: ********* ******** ********

**** **, ******, ** ******* ** *** ***** ** ********* firmware ******** ******* ** *** ************* ******* ********* **** * customer ** ********* *****, *** **** ******** ******** *******.

Thumbnail newheadshot

Sean Nelson

Nelly Security | In reply to John Honovich | 10/31/17 10:53pm

**** *****, ** ***** **** ******* ***** ***** ** *******.

*** ** *** ******* ******, ********* ******** ****** ** ****** without **********. ** ****** ***** ****** ** **** **** ** push ************ ** *** **** **** ***** ** * ******** upgrade *********.

Undisclosed Manufacturer #5

11/01/17 12:22am

* ***** **** ** *** * *** **** ** ***. Simply *** *** **** ******** ** ****** *** ******** **** accounts *** *** *** ***** ******** *************.

Undisclosed Manufacturer #6

11/01/17 12:44am

***** * **** ** **** ******** ** * *** **** IMHO. ****, **** *** ***** **** ** ******** ********. **** to ** ***** **** **** *** ********** ***** ******, ******* solving *** *******. ** **** ****** ****** *** ******** **** the ***, **** *** ***** ** *** *** ******* *** a ***** ******** ** ***** ** *** ***. ** ** protected ** * ********/********. **** ***** ** **-*******, ** *** backdoor ***** *******? **** *** *** ******* ***** ****?


****, *** ****, * ******* **** ** ** ******** ******** is **** *****. ** *** ***** ******* ** *** ****** via *****, *****'* ** **** *******?

** **** **** ******* ******** ***** *** *** ***** **** accounts. ** ** **** *** ** ***** ** ****** * camera ******** **** **** ******, *** **** ****** ***** *** ONVIF *******, ***** ***** **** ** ************ ******.

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Undisclosed Manufacturer #6 | 11/01/17 01:45am

****, *** ****, * ******* **** ** ** ******** ******** is **** *****. ** *** ***** ******* ** *** ****** via *****, *****'* ** **** *******?

***** ** ** ** *******, **** ****/**** ** ***********. ** you *** **** *** ******'* *** ********* *** ****** * root ********, ** ******** ***** ***** **'* **-*******. ** **** not ****** *******.

** **** **** ******* ******** ***** *** *** ***** **** accounts. ** ** **** *** ** ***** ** ****** * camera ******** **** **** ******, *** **** ****** ***** *** ONVIF *******, ***** ***** **** ** ************ ******.

***, ******* ********* *** ********. *** *** ****** *** ***** users ** *** **** *** *** ********* ** ****** *** RTSP ******. *** *** **** *** ** *** ***** ********.

Undisclosed Manufacturer #6

11/01/17 01:56am

*** ***** *** *** ***** *********** **** ****** ****'* ****** and *** ***** ****** ******* ** ****** ******** ** *** camera.

R OD

IPVMU Certified | 11/01/17 01:41pm

***, *** *** *** ***** ****** **** **.*.*.* ** **** enable/disable ***** ********.

Bulk Set ONVIF accounts

Thumbnail profile pic

Ethan Ace

IPVM | In reply to R OD | 11/01/17 03:28pm

****** *** ****. * **** ********* ****** ****** * *** your ****. **'** *** * **** ** **** ** *** report.

John Honovich

IPVM | 11/02/17 03:36am

Update: ******* ***** ****** ******

*** ********* ******* ***** *** ****** ********** **.* ******** *** ******, ****** **** ******, ********** **** "** ******* **** ***** to ********, *********, *** ****** ***** **** ********* *******" *** that *********, ******** **** ***** *** *********** **** ******* *****. Network ***** **** ******** ***** ** ***.***** **** ~**% ** ******* ***** ********* ******* *** *********, **** ***** ** * ***-******* ******* ***** *** *** company.

Undisclosed #7

In reply to John Honovich | 11/02/17 06:27am

****'* **** **** ** ****! ****, ******* ** *** ****** and ********* **** ******* (**** *******) ***** ********'* ****.

***** ** ******* **** *** ******* ***** *** *** ****** to ****** ***** ******* **** *** ******** ** ***** ******.

Undisclosed #7

In reply to John Honovich | 11/02/17 07:00am

* ****** ****** **** ****************** *** ******* ***** ****:

**** ** *** ********** **** ** **** *** **** **** check "****** *********-***" ***** ***** *** "****** *****" ***.

************, *** **** *** ***** *** ***** **** **** ***** in *** ************* -> ************** ****. ** ** **** ****** as ** ***** ****, ** **** *** ****.

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Undisclosed #7 | 11/02/17 03:18pm

** ***** **** **'* ******, *** **'* *** *******. ** turned *** ***-***, ******* * **** ***** "*********" *** *****, and *** *** *** ** ** *** **** **** ****.

****** **** **** **** ** ** *******:

Rodney Thayer

In reply to John Honovich | 11/02/17 02:02pm

** ***'** ****** **** *** ****** ****** ** ** **** known ******** ** ****** *** *******. ****** **** * ******** issue.

Undisclosed #7

In reply to Rodney Thayer | 11/02/17 03:40pm

* ***** ******** ***'* * ******* ** ******, *** ** a ********** ******* *** * *** ** *** ** ******* else ** ******** (***** ******* ****** ** ******* ****). **** of * ******* ** **** *** *** *** **** **** installing * ****** ******* ********** * *** *** ** *********** for **. *** **** ***** ** **** ******* *** **** secure ** **** **'* **** ******-*********, *** **'* * **** right *** *** ****** ******** ********** *** ** * *********.

***** *** ****** ****** ****** **** * ******** ******** ****** email ** *** ***** *** *** "**, * *** *** the ******** *** *'* *** ******** **, *********** ***. **** * *** ******** ******* *** *** **** these ***: ...", ***.

Undisclosed #3

In reply to Rodney Thayer | 11/02/17 03:40pm

** ***'** ****** **** *** ****** ****** ** ** **** known ******** ** ****** *** *******.

**, **’* *** ****** ****. ******* ***** ** ***** ******** credential *** **** *** ********, *** *** ******* ** ******* a ****** **** ********.

***** *** *** ******** ******* *******, ** ****** *** ***** into *** *********, ***** *** ***-*****. *********, ** **** *** the *********** ** *** ***-***** ********. ********* ** *** **** using *****, ** **** **** ***** *** ******** *** ***** user ******** ** *** ******.

Undisclosed Integrator #4

In reply to Undisclosed #3 | 11/02/17 07:59pm

*** ******'* ********* **** ******** ** **** ***-*****/***** ********* ***** the ******** ******. ** * ******* ********* ** *** ********** of **** *********?

Undisclosed #3

In reply to Undisclosed Integrator #4 | 11/03/17 12:01am

*** ******'* ********* **** ******** ** **** ***-*****/***** ********* ***** the ******** ******...

****, *** ***** *** ***** **** *****, **** *** ** the ******* *** *** *** ** * ****** *****’* ** ONVIF **** ******** **** ******* ** **.

*******, **** *** *** ********** ***** ** ‘***’. ** **** want *** ** ** ** ***** *** *********** ****** *****.

Jeffrey Hinckley

Norris, Inc., S. Portland, ME | 11/02/17 05:42pm

*********, **** **** *** ***** ** **** *** *** ****, but * ***** **** ** ******* *** ** **** ******* thinking. * ** *** *** ***** ******, ***** *** *** VMS ******* * *** **** ********* ****** ****** *******. **** I *** * *** ***, ***, ** ****, * **** the ******. ***, * **. **** ***** **** *** ******** upgrades. *** ***** ******* ******* ******* ******* *****. (****** **** IPVM *** *** **** **** ****** ******* **** *******, *** if **** ***, ****** **** ******** **** ** *** *********. That **** *** ****** ******** ******, ***** ***** *************). ****, most ********* ** *** **** ******* ******** ** *** ******* notes. ****, *** ***** ** **** ******** * ********* ****** before ******* ** *** ** *** ****** ***/**** ****. ****, many ** *** **** ***. ** *** ***** *** ****** first.? **** ** **** *** ****, **** ***** ******* *****? Imagine ****, **** *** ******** *** *** ********, ** ****** you ** **** ******** *** ******* *****. *** **** ****** not ****** **** ** **** *** ****. **** ****** ****** have **** **** ** * *************** **** * ******* ***-*******.

**** ** *** ***** ** **** *******. ***? ***** ********* like “********* ********* ******** ************* **** ***** *************”. *******, **** seems ** ******* *** .** ******* ** ********* ******* ********** through ***** ** * *** ****** *** ** ***** *****, the * ******* ** *********** ** ********* **** ** *** read ******* *****, **** *** ******** ****** ******** ** *** first ***** (** ** *** **** ** *******), ** **** not ****** *** *******.

*********, **** ** *** **** ****. (* ** *** * little ****** **** **** ************* ******* “*******” ***** ****** *** the ***** ** ***** ****. **** **** ******** **** ** promote, *******, *** ******* ** *** ******** **** ******** ******** collaboration. ** *** *** ******* **, ************* **** ** ******** and ******* ******** *********** ** **. ******, ** *** *******. Now, **** **** ******* **** ** *** ************ ****).

Thumbnail profile pic

Ethan Ace

IPVM | In reply to Jeffrey Hinckley | 11/02/17 06:02pm

*******, ****** *** **** *******.

** ****** *** **** *** ******* *****. ****'* *** ** found *** ***** ***** ***** ******** ** *** ***** *****. The ******* ***** ******* ******* ***** ***** ******** ** *******. They ** ***, *******, ******* ********* ** **** *******. **** is *** ****** *******

***** ******** ** ******** ** *******. *** **** ** ***** configuration ** *** ********* ** *************->******->******** ********->*********** ********. ***** **** accounts **** ** ** ******* *** *********** ** *****. ***** ONVIF **** ****** ** *************, **** *** ******** *** **********, with ** ** ** **** ********. *** *********, ****-**** *** Batch ************* **** *** ********* *** ***** *************

* ******** ********** ******* ***** ***** ******** ** *******, *** turning *** ******** **** ****'* ***** ** ** **** - that's **** ******** ********, *** ********* ** ** ******* ***** are ********* *** ***** ** ***. ** *** *****, * warning ****** ** ***** ** ******* ***** (**'* ***), *** at ****, *** ****** ****** ****** ** ***** *********** *** in *** *** *** ******* **.

******, **** ** *** ** **** *** ******* *****, *** test *** ******** (** ***, *****), *** **** **** **** here? ******* *** ***** ***** ** *** ******* ******* ** downtime *** ******, ** *****, ***** *** ******* **** *** ONVIF ***** *** ******* *** *******. *** **************'* ***** ****** ** ********, ** * **** * ********* ****, *'* ***** ***** firmware ****** ** ** *****.

****, ** ***** ** *.**% ** ********* ******* *** ********* via *****, *** **'* *** **** **** ****** ** ***** substantial ****** *** *******, ** *** *** ****** **** ********* here. ******** *** ******* ***** **** *** ***** ** ********* Hikvision. **** ** * ***-******* ****** ** *******.***** * ***** ** ******* ********* ** ******* ***** *** Hikvision, ** ***** *****, ** **** ** ********* ********* ** ********.

Thumbnail newheadshot

Sean Nelson

Nelly Security | In reply to Jeffrey Hinckley | 11/02/17 06:12pm

******, ** ** * ************* ********.

** ********* **** **** ***'** **** **** *** * ****** Hikvision ******** ******* ** ***** *****. ******* ************ ************ ** the ***** *** **** *****. **** ***** ** * *** marketing ****** **** ***** *** "********* **********"

******* ***** *** **** *** ***** ***** ***** *********.

Undisclosed #3

In reply to Sean Nelson | 11/02/17 06:54pm

******* ***** *** **** *** ***** ***** ***** *********.

** *** ***** ****, *** ***** *** *** ************* ********** ** ******* ** ****** **** ***** ********** ******* *****.

***** ***** ** **********.

Undisclosed #7

In reply to Jeffrey Hinckley | 11/02/17 06:44pm

**** ***** **** ******** *** ******** **** ** ***** ***** losing ******* *** *** ** **** ** **** ********* ** migrate *** ******** ********, *** ***** ** ***** **** ****** their ******* ********. **** ******** ******* *** ****** **** ** just ****** ******, *** ******* ****** **** *** ** ******* their ******** ** **** ** **** ** ** * ****** ago. ***** ** ***'* ***** ** **** ******** *** **** IPVM ***** * *****-** ***** **.

******* ****'** *** ** ** *** **** *******.

John Honovich

IPVM | In reply to Jeffrey Hinckley | 11/03/17 05:45am

**** ** *** ***** ** **** *******. ***? ***** ********* like “********* ********* ******** ************* **** ***** *************”.

******* ****** *** *** ********* ********! ***** *** ******* **** addressed **** ***** ********. *'** **** ***** ** *** ***** of *** ******* *******.

** ***** ** **** ********* *** **** ** ******* ******** but ** ** **** ******* **** **** ***** *** ************. The ****** *** ** ********* ******, *** ****** ******.

** **** *****, ******, ** ********* ****** ********* ***** ** the **** *** ** ***** ******** ********, **** ****** *********** that. *** ****** ***** ** **** ** ***** ***** ************ hard ******** *****. ** *** *** ***** ************* ********** ** did ********* **** * ******* ** **** **************? * **** that *********. * ** ********* ********** ** ******* **** ******.

**********,**** ** *** *** ** ***** ******** * ** ******* ******* ** *** ********** ** **** matter ** ** ******* ** *** ***** ******** ********* ****** when ** *** ********** **** *****.

John Honovich

IPVM | 11/20/17 12:58am

****** ** **** / **********:*** ****** $*** *** ***** ****** ********* ***** ******* *****

Thumbnail profile picture john

John Bazyk

IPVMU Certified | 12/04/17 02:44pm

*** **** ************ **** ** *** ***** ***. ****'* ***** response ** ********* ******** *****. * ***** ** ******* ** know *** **** *** **** *** ** ***** *** **** follow. * ********** *** ****** *** ********** **** *****.

*.*.*.***** ***** ********** ******
********* ** *** ****
******* *****:

************
***** ****** ******* *** **** ***-*****.
*** **** ******* *******: *****, *****, ***-*****, ****-*****, ***-*****, ***, FA54, *****, *****, *****, *****, ******, ******, *****, *****, *****, M3048, *****, *****, *****, *****, *****, *****, *****, *****, ******, F1015, *****, *****, *****, *****, ****-*****, ****-*****, ****-*****.
********* *.*+ ***** ********* **-********
"** **** *******" ****** ************. *** **** *** ******* ******* and ************ **** ********.

Sergey Bystrov

NetworkOptix | In reply to John Bazyk | 12/04/17 09:07pm

*** ***** ***** ******** **** - ******* ***** ** *** camera.

**** ** *** *****-**** ***. ** **** ** ***** ****, because ** ********* ***** *** ******** *** ******* *** **** info ** *********.

*** ** ****** ***** ** ******

*** ******** *** ******** ** ** ** *** ** *** Hikvision *********.

*** ******** *** ********* ******(**** ** ******* *** ***), *** you *** *** *** ****...

******* *** *** ******* ******** **** ****** **** *** ******, Wireshark, *** *** *******.

Thumbnail msnedit

Blake Murphy

03/06/18 01:10am

***, **** ** ***** ****, **** ** ****** ************ ** a ***** ***...

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

VMS Server Sizing on May 25, 2018
Specifying the right sized PC/server for VMS software is one of the most important yet difficult decisions in IP video surveillance. In the past...
Hanwha Wisenet X Analytics and VMD Test on May 24, 2018
Continuing our updated testing of camera analytics, we tested Hanwha's Wisenet X analytics for over two weeks in multiple scenes, indoors and out,...
Software Only VMS vs NVR Appliances on May 23, 2018
Should you buy your own PC/server and load VMS software on it or get a turnkey appliance (both hardware and software, e.g., NVR, Hybrid DVR) from a...
Dahua Intrusion Analytics And VMD Tested (Poorly) on May 21, 2018
Dahua ships basic analytics on practically all their cameras, ranging from low cost to high end. To see how these analytics work in real world...
Best Manufacturer Technical Support 2018 on May 21, 2018
While 5 manufacturers made the worst technical support 2018 list, only 3 stood out as providing the best technical support to 190+ integrators in...
Cybersecurity for IP Video Surveillance Guide on May 18, 2018
Keeping surveillance networks secure can be a daunting task, but there are several methods that can greatly reduce risk, especially when used in...
Dahua 12MP Fisheye Camera Tested (NK8BR4) on May 16, 2018
Continuing our coverage of 12MP sensor fisheye cameras, we bought and tested the Dahua NK8BR4, examining: Default vs. Optimized...
Worst Manufacturer Technical Support 2018 on May 16, 2018
5 manufacturers stood out as providing the worst technical support to 190+ integrators in new IPVM results. These integrators answered: In the...
Axis 12MP Stereographic Camera Tested (M3058-LVE) on May 10, 2018
Axis has released the M3058-PLVE, a 12MP sensor, stereographic panoramic camera and Axis' first with integrated IR claiming images "sharp to the...
N3N "Truly Open Visualization Platform For Physical Security" Profile on May 09, 2018
A Cisco-backed startup, N3N, claims to deliver "the world’s first and only truly open visualization platform for physical security." The company...

Most Recent Industry Reports

VMS Server Sizing on May 25, 2018
Specifying the right sized PC/server for VMS software is one of the most important yet difficult decisions in IP video surveillance. In the past...
China: Foreign Video Surveillance Is Security Risk on May 25, 2018
The Chinese government has long acknowledged that foreign video surveillance is a 'risk to national security' and has increasingly and almost...
US House Passes Bill Banning Gov Use of Dahua and Hikvision on May 24, 2018
Today, the US House of Representatives passed H.R. 5515, a bill that includes a ban on the US government's use of Dahua and Hikvision. This follows...
Hanwha Wisenet X Analytics and VMD Test on May 24, 2018
Continuing our updated testing of camera analytics, we tested Hanwha's Wisenet X analytics for over two weeks in multiple scenes, indoors and out,...
Ambitious Mobile Access Startup: Openpath on May 24, 2018
This team sold their last startup for hundreds of millions of dollars, now they have started Openpath to become a rare access control small...
Amazon's "Dangerous New Face Recognition Technology" Says ACLU on May 23, 2018
The ACLU has caused a stir, with a new report Amazon Teams Up With Law Enforcement to Deploy Dangerous New Face Recognition Technology,...
Software Only VMS vs NVR Appliances on May 23, 2018
Should you buy your own PC/server and load VMS software on it or get a turnkey appliance (both hardware and software, e.g., NVR, Hybrid DVR) from a...
Buy Arecont: Top Bid $10 Million Cash on May 22, 2018
Last year, Arecont had a deal for a purchase price of $170 million (see Failed Arecont China Acquisition). This year, Arecont has a deal for a...
Installing Box Cameras Indoors Tutorial on May 22, 2018
This tutorial starts our physical installation for video surveillance series, starting with Box Cameras, one of the oldest and most basic types....
The Hikvision Smart Classroom Behavior Management System on May 22, 2018
Hikvision's rapidly growing offering of analytics, which we most recently examined with Hikvision's ethnic minority analytics, is now going into...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact